Is the talent shortage in IT impeding the fight against ransomware?

2k views1 Upvote3 Comments

Head of Enterprise & Solution Architecture, 1,001 - 5,000 employees
There is a lack of people who truly understand cybersecurity well, and only the largest companies can afford that top talent—even though they've been attacked as well, as we can see on the news. For smaller and medium-sized businesses (SMBs), it's very challenging. We hear about lots of ransomware attacks on government, local, and state agencies. Those agencies do not pay the most money; therefore, they don't attract the best talent. If you don't attract the best talent, your network, systems, and all your data is more vulnerable. Maybe that's making ransomware even more difficult to mitigate or at least minimize.
Founder and CIO, Self-employed
Having run IT teams in midsize companies, you can't have the best of everything, so that is a challenge. And if you happen to get top talent or you happen to train one up, they go somewhere else and then you're starting over. The question is, how do you buy top talent when you need them? Maybe the answer to that is to work with a cybersecurity firm and establish that relationship before you actually need them.
Director of IT in Software, 201 - 500 employees
I think one of the challenges is that nowadays we have half-baked Security professionals out there. Don't get me wrong, there are tons of great experienced folks, but as there is such a shortage in this profession we see many who become so-called Security Pros overnight by attending 6 weeks to few months college program, or converts from other professions, while there are successful stories, you see someone working as a bank clerk for 5 years and then realized that Security makes more money, went to the local college and passed Security +, and you hire him as Security Analyst, the poor guy does not know the difference between TCP and UDP and have no idea what VLAN is. How can you expect that he can protect the network or the system?

There is a shortage of good talent, the great talent is hired by big companies, and we have half-backed security admins that small to medium businesses can afford, so they hire what's available.

To be a good security admin you need to preferably be a good network or system admin before, you need to understand the underlying technology stack to be able to protect it.

The same story goes with higher-level positions, you have SAP consultants who realized that their profession is dying and went and got CISSP and then want to be CISOs. So yeah, ransomware will continue happening...

Content you might like

crowd strike38%

sentinel one56%

carbon black5%




Yes - Maine did the right thing. There are too many security risks with free versions of these tools. Not enough copyright or privacy protections of data.31%

No, but.... - You must have good security and privacy policies in place for ChatGPT (and other GenAI apps). My organization has policies and meaningful ways to enforce those policies and procedures for staff.52%

No - Bans simply don't work. Even without policies, this action hurts innovation and sends the wrong message to staff and the world about our organization.12%

I'm not sure. This action by Maine makes me think. Let me get back to you in a few weeks (or months).3%


9.2k views9 Upvotes1 Comment

CTO in Software, 201 - 500 employees
Without a doubt - Technical Debt! It's a ball and chain that creates an ever increasing drag on any organization, stifles innovation, and prevents transformation.
Read More Comments
46.5k views133 Upvotes324 Comments